Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS398256.roa
File: AS398256.roa (raw, json)
Hash identifier: Ie5RYK/8iebqEnhH19ukuEL+t+BjteKCq96FdKsBJj8=
Subject key identifier: B5:E6:81:69:65:4A:54:EF:DC:0F:17:B3:64:01:A2:9C:28:3A:81:95
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 75E66FAC31AEF9295888D199CEB388331E3CBA59
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS398256.roa
Signing time: Sat 29 Aug 2026 13:05:50 +0000
ROA not before: Sat 29 Aug 2026 13:00:50 +0000
ROA not after: Sat 28 Aug 2027 13:05:50 +0000
asID: 398256
IP address blocks: 51.194.112.0/24 maxlen: 24
51.241.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:e6:6f:ac:31:ae:f9:29:58:88:d1:99:ce:b3:88:33:1e:3c:ba:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 29 13:00:50 2026 GMT
Not After : Aug 28 13:05:50 2027 GMT
Subject: CN=B5E68169654A54EFDC0F17B36401A29C283A8195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fc:d2:ae:67:c3:eb:08:27:b9:0c:38:99:03:
5f:a3:c7:ee:cc:3c:70:2c:33:0c:03:7b:e1:55:ea:
b3:e2:ce:2f:64:46:be:4c:ca:f1:7c:3a:51:b9:7a:
cc:c2:5f:dd:4d:b2:10:e3:bf:56:17:a6:11:1c:26:
c2:09:37:d1:1c:83:aa:44:03:3c:b1:d3:39:e9:45:
fb:06:38:24:02:2b:45:6e:54:3d:14:c2:91:53:7e:
19:7f:72:2f:a1:48:63:77:81:ad:dc:db:56:e7:94:
bf:c2:2e:53:23:7e:5c:e0:f1:fc:20:64:96:8a:81:
a2:b8:6f:d4:52:50:3c:94:c2:e4:d3:46:32:d9:71:
3b:fd:ec:dc:bf:6f:b1:fc:a9:77:24:39:26:08:3d:
7f:c0:5e:1d:70:b9:ac:56:4c:7f:18:6b:44:0c:13:
18:38:ce:b6:17:9c:38:1e:0e:97:f8:61:d8:36:74:
52:25:66:f6:3b:01:c7:f8:d0:b7:4d:ec:b4:dd:ad:
e5:0f:21:bc:a8:f4:59:e4:01:57:fc:4f:48:77:26:
96:7c:59:ab:55:8f:25:a3:73:af:ee:04:f6:e9:14:
36:34:b4:de:d9:0d:23:e6:62:cf:9e:fa:af:6d:f1:
ed:dc:1b:74:55:dc:5b:00:26:c3:a4:ea:7d:6e:57:
b1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E6:81:69:65:4A:54:EF:DC:0F:17:B3:64:01:A2:9C:28:3A:81:95
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS398256.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.112.0/24
51.241.125.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:43:3c:49:f6:48:9b:7f:b3:34:1d:25:4d:67:e4:ee:b3:c2:
76:29:ee:09:96:65:e9:b1:e5:ba:ce:5e:dc:8f:6d:8d:66:87:
fd:79:04:0f:5a:6f:67:75:e0:33:0b:6d:10:da:cd:d3:49:b2:
7e:e1:33:09:2f:d1:bc:6a:21:a4:99:cb:3a:a4:b4:f1:4a:ff:
c1:a8:52:da:7f:f7:b8:16:cf:a2:ce:b2:01:01:c5:4e:8c:56:
3a:4e:83:06:ea:83:c1:4e:33:b1:87:a8:a2:d6:1f:53:a7:a3:
bb:03:de:87:ec:d9:9c:ab:0d:65:99:55:7b:9a:7b:42:2d:c7:
a5:b1:fa:fe:48:3c:d9:de:1d:34:95:bc:02:5b:02:2d:8c:80:
17:99:6c:4f:8d:b9:45:23:19:bf:20:5b:ea:9e:bd:d4:01:99:
14:03:34:85:c7:f4:dc:b6:44:7f:d8:a3:2b:8b:1a:7a:bf:c6:
8d:7c:01:ee:79:2c:75:55:81:49:76:c9:1e:b3:2d:8e:3b:2a:
f6:49:b8:d0:fb:4d:00:26:67:17:6b:0a:55:4e:9a:54:b9:57:
ff:d1:f6:48:b6:a9:8f:8e:c6:b5:58:a6:bd:38:a8:85:41:7b:
88:eb:95:e9:b1:cc:88:4e:3b:7c:71:bb:ff:1b:c5:4a:bc:9f:
01:10:fb:45
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUdeZvrDGu+SlYiNGZzrOIMx48ulkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA4MjkxMzAwNTBaFw0yNzA4MjgxMzA1NTBaMDMxMTAvBgNV
BAMTKEI1RTY4MTY5NjU0QTU0RUZEQzBGMTdCMzY0MDFBMjlDMjgzQTgxOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX/NKuZ8PrCCe5DDiZA1+jx+7M
PHAsMwwDe+FV6rPizi9kRr5MyvF8OlG5eszCX91NshDjv1YXphEcJsIJN9Ecg6pE
Azyx0znpRfsGOCQCK0VuVD0UwpFTfhl/ci+hSGN3ga3c21bnlL/CLlMjflzg8fwg
ZJaKgaK4b9RSUDyUwuTTRjLZcTv97Ny/b7H8qXckOSYIPX/AXh1wuaxWTH8Ya0QM
Exg4zrYXnDgeDpf4Ydg2dFIlZvY7Acf40LdN7LTdreUPIbyo9FnkAVf8T0h3JpZ8
WatVjyWjc6/uBPbpFDY0tN7ZDSPmYs+e+q9t8e3cG3RV3FsAJsOk6n1uV7GNAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUteaBaWVKVO/cDxezZAGinCg6gZUwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMzk4MjU2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAM8Jw
AwQAM/F9MA0GCSqGSIb3DQEBCwUAA4IBAQCbQzxJ9kibf7M0HSVNZ+Tus8J2Ke4J
lmXpseW6zl7cj22NZof9eQQPWm9ndeAzC20Q2s3TSbJ+4TMJL9G8aiGkmcs6pLTx
Sv/BqFLaf/e4Fs+izrIBAcVOjFY6ToMG6oPBTjOxh6ii1h9Tp6O7A96H7Nmcqw1l
mVV7mntCLcelsfr+SDzZ3h00lbwCWwItjIAXmWxPjblFIxm/IFvqnr3UAZkUAzSF
x/TctkR/2KMrixp6v8aNfAHueSx1VYFJdskesy2OOyr2SbjQ+00AJmcXawpVTppU
uVf/0fZItqmPjsa1WKa9OKiFQXuI65XpscyITjt8cbv/G8VKvJ8BEPtF
-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:46 2026 by rpki-client